deblan-mirror/nextcloud-spreed-signaling
deblan-mirror/nextcloud-spreed-signaling
1
0
Fork 0
mirror of https://github.com/strukturag/nextcloud-spreed-signaling synced 2026-03-14 14:35:44 +01:00
Code Issues Releases Wiki Activity

docker: Make candidates lists configurable.

Browse source
This commit is contained in:
Joachim Bauch 2025-06-04 20:25:59 +02:00
commit 47a7a9591a
No known key found for this signature in database
GPG key ID: 77C1D22D53E15F02
3 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docker/README.md
View file

@ -55,6 +55,8 @@ The running container can be configured through different environment variables:
- `PROXY_KEY_PREFIX`: Key prefix of proxy entries.
- `MAX_STREAM_BITRATE`: Optional global maximum bitrate for audio/video streams.
- `MAX_SCREEN_BITRATE`: Optional global maximum bitrate for screensharing streams.
- `ALLOWED_CANDIDATES`: List of IP addresses / subnets that are allowed to be used by clients in candidates. The allowed list has preference over the blocked list below.
- `BLOCKED_CANDIDATES`: List of IP addresses / subnets to filter from candidates received by clients.
- `TURN_API_KEY`: API key that Janus will need to send when requesting TURN credentials.
- `TURN_SECRET`: The shared secret to use for generating TURN credentials.
- `TURN_SERVERS`: A comma-separated list of TURN servers to use.
@ -117,6 +119,8 @@ The running container can be configured through different environment variables:
- `JANUS_URL`: Url to Janus server.
- `MAX_STREAM_BITRATE`: Optional maximum bitrate for audio/video streams.
- `MAX_SCREEN_BITRATE`: Optional maximum bitrate for screensharing streams.
- `ALLOWED_CANDIDATES`: List of IP addresses / subnets that are allowed to be used by clients in candidates. The allowed list has preference over the blocked list below.
- `BLOCKED_CANDIDATES`: List of IP addresses / subnets to filter from candidates received by clients.
- `STATS_IPS`: Comma-separated list of IP addresses that are allowed to access the stats endpoint.
- `TRUSTED_PROXIES`: Comma-separated list of IPs / networks that are trusted proxies.
- `ETCD_ENDPOINTS`: Static list of etcd endpoints (if etcd should be used).

6
docker/proxy/entrypoint.sh
View file

@ -96,6 +96,12 @@ if [ ! -f "$CONFIG" ]; then
if [ -n "$MAX_SCREEN_BITRATE" ]; then
sed -i "s|#maxscreenbitrate =.*|maxscreenbitrate = $MAX_SCREEN_BITRATE|" "$CONFIG"
fi
if [ -n "$ALLOWED_CANDIDATES" ]; then
sed -i "s|#allowedcandidates =.*|allowedcandidates = $ALLOWED_CANDIDATES|" "$CONFIG"
fi
if [ -n "$BLOCKED_CANDIDATES" ]; then
sed -i "s|#blockedcandidates =.*|blockedcandidates = $BLOCKED_CANDIDATES|" "$CONFIG"
fi
if [ -n "$TOKENS_ETCD" ]; then
if [ -z "$HAS_ETCD" ]; then

6
docker/server/entrypoint.sh
View file

@ -150,6 +150,12 @@ if [ ! -f "$CONFIG" ]; then
if [ -n "$MAX_SCREEN_BITRATE" ]; then
sed -i "s|#maxscreenbitrate =.*|maxscreenbitrate = $MAX_SCREEN_BITRATE|" "$CONFIG"
fi
if [ -n "$ALLOWED_CANDIDATES" ]; then
sed -i "s|#allowedcandidates =.*|allowedcandidates = $ALLOWED_CANDIDATES|" "$CONFIG"
fi
if [ -n "$BLOCKED_CANDIDATES" ]; then
sed -i "s|#blockedcandidates =.*|blockedcandidates = $BLOCKED_CANDIDATES|" "$CONFIG"
fi
if [ -n "$SKIP_VERIFY" ]; then
sed -i "s|#skipverify =.*|skipverify = $SKIP_VERIFY|" "$CONFIG"